Skip to main content
This guide applies to Apple devices

​
About OS Update Delay and Enforcement

To maintain a consistent software update schema across your organization, you can defer software updates and choose when they’ll automatically be installed. There are two places you’ll want to configure this: Software Update profile and Apple Restrictions profile from within your Library.

​
How It Works

Iru Endpoint provides flexible options for managing OS updates:
  • Delay periods - Configure how long to wait before enforcing updates
  • Enforcement policies - Set automatic or manual enforcement rules
  • User notifications - Keep users informed about pending updates
  • Compliance tracking - Monitor which devices have successfully updated

​
Software Update Library Item

You can use the Software Update Library Item to manage downloading, installing, and deferring updates. This is a great way to make sure that, at minimum, security updates are being automatically installed on all of your devices.
The Software Update Library Item is supported on macOS, iOS 18.0+, iPadOS 18.0+, tvOS 18.4+, and visionOS 26+.

​
Create a Software Update Library Item

To add this Library Item to your Iru Endpoint Library, follow the steps outlined in the Library Overview article.

​
Configure the Software Update Library Item

1

Name the profile

Give your software update profile a Name.
2

Assign to Blueprints

Assign to your desired Blueprints.
3

Configure automatic updates

Select your desired settings for Automatic Updates.
4

Configure Software Update Deferrals

Under Software Update Deferrals, in the iPhone, iPad, Apple TV, Vision only settings section, check Defer updates.
5

Set deferral period

Set Defer for to the number of days (1–90).
6

Set recommended cadence

Set Recommended cadence to All, Oldest, or Newest to specify how software updates are shown to the user.
7

Configure macOS deferrals

Under Mac only settings, select Defer macOS updates by type from the dropdown.
8

Set deferrals for each macOS update type

For each option you enable, set Defer for to the number of days (1–90):
  • Defer major macOS upgrades — Delays software upgrades on the device; upgrades appear only after the specified delay following release.
  • Defer minor macOS upgrades — Delays software updates only (not upgrades or Rapid Security Response); updates appear only after the specified delay following release.
  • Defer other system updates — Delays non–operating system updates; they appear only after the specified delay following release.
9

Disallow beta installation (Optional)

Under Other, in iPhone, iPad, Mac only settings, you can optionally check Disallow beta release installation. This specifies whether beta program enrollment can be controlled by the user in the software update settings user interface. Learn more about Restricting Access to Beta OS Releases.
10

Save the configuration

Click Save in the bottom right corner.

​
Apple Restrictions Library Item

The Defer software updates section in the Apple Restrictions Library Item is deprecated as of iOS 26, iPadOS 26, tvOS 26, and macOS 26. Use the Software Update Library Item instead.
Under OS Updates in the Apple Restrictions Library Item, the Defer software updates option delays user visibility of software updates for a specified number of days (up to 90). iPhone and iPad devices require Supervision. For Mac computers, Iru Endpoint recommends using a Software Update Library Item and deferring updates by specific types. For step-by-step configuration, see the Configure the Software Update Library Item section above.

​
Block Beta & Standard Upgrades

The native options for blocking beta updates are also enabled using the Software Update profile in your Blueprints. Due to this change, the App Blocking Library Item can’t block these upgrades. The only circumstance when the App Blocking Library Item will block the update is when it’s downloaded from the Mac App Store. Learn more about Restricting Access to Beta OS Releases. The following examples are specific to macOS Sonoma, macOS Sequoia, and macOS Tahoe. For each release, you’ll need to update each setting with the relevant info specific to that release. This will only block the installer if it’s downloaded from the App Store and won’t block the update in Software Update. Tahoe - Public Release
  • Process name: Install macOS Tahoe
    • Match Type: Contains
  • Path: /Applications/Install macOS Tahoe.app
    • Match Type: Contains
  • Bundle ID: com.apple.InstallAssistant.macOSTahoe
    • Match Type: Exact
Sequoia - Public Release
  • Process name: Install macOS Sequoia
    • Match Type: Contains
  • Path: /Applications/Install macOS Sequoia.app
    • Match Type: Contains
  • Bundle ID: com.apple.InstallAssistant.macOSSequoia
    • Match Type: Exact
Sonoma - Public Release
  • Process name: Install macOS Sonoma
    • Match Type: Contains
  • Path: /Applications/Install macOS Sonoma.app
    • Match Type: Contains
  • Bundle ID: com.apple.InstallAssistant.macOSSonoma
    • Match Type: Exact